(ITS#5384) access control: "attrs" field handled incorrectly in URI form of sets

[ando@sys-net.it]

Full_Name: Pierangelo Masarati
Version: HEAD/re24/re23
OS: irrelevant
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (81.72.89.40)
Submitted by: ando


There seems to be an error in (optional) attribute handling in URIs used in
sets.

Background: in OpenLDAP 2.3 sets were enhanced by allowing to dereference URIs
by performing the corresponding internal search; the syntax was:

        [<uri>]/<attr>

returning the value of <attr> after searching for <uri>; if optional attrs were
specified in the URI, their values could be added to the result set; so

        [ldap:///o=suffix?cn,sn?sub]/uid

would have collected the "cn", the "sn" and the "uid" of entries matching the
URI.

Well, this is broken: it seems to only work as expected when no optional attrs
are given.  A fix for HEAD is about to come.

p.